[apparmor] debugging aa_change_profile

John Johansen john.johansen at canonical.com
Thu Apr 26 23:31:03 UTC 2012

On 04/26/2012 04:20 PM, Jeroen Ooms wrote:
> Thank you. I was planning on switching to 12.04 as soon as it is
> released, so hopefully that will fix my problem.
> One final issue: I managed to switch into a profile using
> aa_change_profile, and into a hat (subprofile) using aa_change_hat.
> However, whenever I try to return out of the subprofile, my process is
> killed.
> I suspect the following: does the magic token just need to be the same
> value, or does it actually have to point to exactly the same object?
> The latter is very hard to do in R, because it makes copies of objects
> before passing them to C.

it only needs to be the same value. If you are being killed apparmor
should be logging what value it sees as being used.

More information about the AppArmor mailing list